LACMA data breach last year exposed social security and medical data

The Los Angeles County Museum of Art, known as LACMA, disclosed that a data breach detected last year exposed both customer and employee information. The museum stated it first noticed suspicious activity on its systems on July 11, 2025, and later confirmed the network had been compromised. The exact nature of the exposed data was not immediately clear, with initial investigation results only becoming available in late February 2026.

More than a year after the initial discovery, the museum identified that the attacker may have accessed a range of sensitive personal details. This includes social security numbers and medical data, according to the notification sent to those affected. LACMA has notified law enforcement about the incident and is sending personalized breach notification letters to impacted individuals.

The museum is advising recipients of these notifications to monitor their bank accounts for any suspicious activity. It also recommends considering a security freeze or fraud alert on credit files and reporting any identity theft attempts to financial institutions and law enforcement. The breach notification letters include information on enrolling in a one-year identity theft and fraud protection service provided through Financial Shield, with an enrollment deadline of November 22. A dedicated phone line has been established to answer questions and provide support to those affected.

LACMA is one of the largest art museums in the western United States, holding a collection of approximately 155,000 works that spans 6,000 years of art history. The museum typically draws more than one million visitors each year. BleepingComputer, which originally reported this story, reached out to LACMA for details on the number of affected individuals and the type of attack, but did not receive a response before publication.

The incident underscores ongoing cybersecurity challenges for cultural institutions, which often hold both financial and health-related data on patrons and staff. For American consumers, the exposure of social security numbers raises the risk of long-term identity fraud, making the offered credit monitoring services particularly relevant. The museum’s delayed identification of the breach’s scope highlights the difficulty organizations face in fully assessing a compromise after the fact.

More cybersecurity news from TechManNews.